| 2023 | SP | FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information. | Xiaoyu Cao, Jinyuan Jia, Zaixi Zhang, Neil Zhenqiang Gong |
| 2022 | AAAI | iGrow: A Smart Agriculture Solution to Autonomous Greenhouse Control. | Xiaoyan Cao, Yao Yao, Lanqing Li, Wanpeng Zhang, Zhicheng An, Zhong Zhang, Li Xiao, Shihui Guo, Xiaoyu Cao, Meihong Wu, Dijun Luo |
| 2022 | AAAI | Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks. | Jinyuan Jia, Yupei Liu, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2022 | CVPR | MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clients. | Xiaoyu Cao, Neil Zhenqiang Gong |
| 2022 | ICLR | Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations. | Jinyuan Jia, Binghui Wang, Xiaoyu Cao, Hongbin Liu, Neil Zhenqiang Gong |
| 2022 | KDD | FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients. | Zaixi Zhang, Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | AAAI | Provably Secure Federated Learning against Malicious Clients. | Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | AAAI | Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks. | Jinyuan Jia, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2021 | AsiaCCS | IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary. | Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
| 2021 | KDD | Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation. | Binghui Wang, Jinyuan Jia, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2021 | NDSS | FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping. | Xiaoyu Cao, Minghong Fang, Jia Liu, Neil Zhenqiang Gong |
| 2020 | ICLR | Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing. | Jinyuan Jia, Xiaoyu Cao, Binghui Wang, Neil Zhenqiang Gong |
| 2020 | WWW | Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing. | Jinyuan Jia, Binghui Wang, Xiaoyu Cao, Neil Zhenqiang Gong |
| 2017 | ACSAC | Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification. | Xiaoyu Cao, Neil Zhenqiang Gong |
| 2017 | ICDCS | PIANO: Proximity-Based User Authentication on Voice-Powered Internet-of-Things Devices. | Neil Zhenqiang Gong, Altay Ozen, Yu Wu, Xiaoyu Cao, Richard Shin, Dawn Song, Hongxia Jin, Xuan Bao |